Microsoft security software detects and removes this threat.

This threat is a webpage that spreads the exploit kit known as Neutrino.

You PC is at risk of infection if you visit this webpage and you have vulnerable software installed on your PC.

You might be redirected to the malicious webpage without your consent.

What to do now

The following free Microsoft software detects and removes this threat:

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

Update Java

Make sure you install all available Java updates. You can read more about this vulnerability and download software updates from these links:

You should remove older versions of Java, as keeping old and unsupported versions of Java on your PC is a serious security risk:

If you continue to get alerted about this threat, deleting your temporary Java files can help:

It's also important to keep your other software up to date:

Update Windows

This threat also tries to exploit a vulnerability in Internet Explorer. Make sure Windows is updated by running Windows Update.

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Threat behavior

A webpage detected as Urntone uses jQuery, and might have be hosted on to decrypt itself.

Urntone checks the version of different software in your PC, to see if any of them are vulnerable to certain exploits. It targets these vulnerabilities in its current version; however, there is a possibility that it might target more in the future:

Analysis by Justin Kim


Alerts from your security software may be the only symptom.


Alert level: Severe
This entry was first published on: Jan 14, 2014
This entry was updated on: May 14, 2014

This threat is also detected as:
  • Neutrino exploit kit (other)